Hi all,

it is possible to define in pound number of same page loads from one IP 
address in some time frame? It is done from several IPs, it opens hundreds 
connections to database driven pages and database subsystem goes down. Page 
cointains some uncacheable data.

Or do you have tip for some tool what it does?

I have Zope2.9.4 behind, where is not possible to define connection timeout 
at webserver nor database connector.

Many thanks, J. Lukesh

Jaroslav,

I believe this is not a job for pound. These kinds of attacks usually 
have to be caught on the network layer before they reach the load 
balancer. If you have a firewall before your site (which you should) see 
if it is capable of any DoS attack protection. If you don't, you best 
contact you connection provider and work this out with them.

Also, there are software based firewalls available on all platforms 
(iptables, pf or some such), which can be used for this purpose.

Michal

Jaroslav Lukesh napsal(a):[...]
[...]

Hello,

If you need a list of known "root login" source IP addresses, check
http://www.hackedreport.com. That
site is updated every day with new IPs
that are pulled out of log files where downstream clients are attempting to
login with root on some known servers.

I use this service to manage some of my systems and have been able to thwart
quite a bit of bad traffic. You can download the IP listing in a variety of
firewall formats.

A word of caution, though - some of your customers might be listed on this
service. Many hackers and ddos networks use cable/dsl subscribers.
[...]